trilobyte wrote:I suspect the reason it's disabled by default is spammy phisherbot mitigation
Oh, and by the way, not to be mean about this - but that is a non sequitir, and I do have to call you on that. The url inserted into code that fails to work is still there, and can still be clicked on. In no way will keeping the code from rendering keep the spammer from doing what he came here to do.
As anybody who has ever run a blog and dealt with spammers knows, they are perfectly happy to leave ugly messes behind and to have their bots do the same. Some of us know this, because we've cleaned up those messes more times than we care to count. The people who are going to be bothered the most by the thought of their posts looking unsightly will be the legitimate users of the forum, not the spammers.